Licensing

The Forefront TMG solution includes two separately licensed elements:

• Forefront TMG 2010 Server provides URL filtering, anti-malware inspection, intrusion prevention, application- and network-layer firewall, and HTTP/HTTPS inspection in a single solution.
  
  
• Forefront TMG Web Protection Service provides continuous updates for malware filtering and access to cloudbased URL filtering to protect against the latest Web threats.

Forefront TMG 2010 is licensed under the processor licensing model, with a license required for each physical or virtual processor accessed by an operating system environment running a TMG Server. This license does not require any device or user CALs.

Forefront TMG 2010 Enterprise Edition and Standard Edition are offered in the following Microsoft licensing programs:

• Enterprise Agreement
• Enterprise Agreement Subscription
• Select
• Academic Select
• Government Select
• ISV Royalty
• OEM
• Open
• Open Value
• Open Value Subscription
• Server Provider License Agreement
• Campus and School Agreements

Forefront TMG Standard Edition is also available in Full Packaged Product (FPP) for retail sale through distributors.

Forefront TMG Web Protection Service is a subscription product licensed per user or per device. It is offered in the same Microsoft licensing programs as Forefront TMG 2010, except for the following:

• ISV Royalty
• OEM
• Open
• FPP

Enterprise vs. Standard Edition
Forefront TMG 2010 Enterprise Edition license gives customers increased scalability, provides access to a central management console, and offers complete support for virtual environments.

The following chart outlines the differences between these editions:

Software Assurance (SA)
Forefront TMG 2010. Software assurance is included for every license in the Enterprise, Enterprise Subscription, Open Value, Open Value Subscription, and Campus and School agreements. Software Assurance is optional for licenses acquired in Open and Select agreements.

Customers with current Software Assurance agreements for the previous version, ISA 2006, are eligible to upgrade to Forefront TMG 2010 free of charge.

Forefront TMG Web Protection Service. Software Assurance benefits, including 24x7 phone support and unlimited Web support, are included with the TMG Web Protection Service license.

Pricing

Below is a list of estimated retail prices for Forefront TMG 2010 and the Forefront TMG Web Protection Service. (Note that Forefront TMG is offered in 25-processor packs at 50 percent off the base price for customers who need TMG in large deployment scenarios.)

Frequently Asked Questions

• What is the processor licensing model?
  
  Under this structure, a customer acquires a separate license for each processor that is located in the server running the TMG Server software. If a customer has made a processor inaccessible to all operating system copies on which the TMG Server software is set up to run, they do not need a software license for that processor.
  
  This model is most appropriate for applications that are accessible through the Internet and for internal applications with a high client-to-server ratio.
  
  
• Do customers have to acquire licenses for all the processors in a server?
  
  Customers need to acquire licenses only for processors that are accessible to any copy of the operating system on which TMG Server software is installed. In a virtualized environment using TMG Standard Edition, licenses are required for physical processors as well as virtual CPUs.
  
  With TMG Enterprise Edition, customers need to license only the physical processors and can run the software on an unlimited number of virtual CPUs.
  
  
• Does Forefront TMG 2010 include Forefront TMG Web Protection Service?
  
  No. Forefront TMG Web Protection Service is licensed separately. It can be licensed stand-alone or as part of the Forefront Protection Suite or Enterprise CAL.
  
  
• When should customers acquire an Enterprise Edition license instead of a Standard Edition license?
  
  Enterprise Edition licenses are best suited for customers who require scalability, management, and extensive virtualization support. Only Enterprise Edition offers unlimited CPU support, as well as support for network load balancing and cache array routing. Customers must also purchase at least one Enterprise Edition license to access the TMG Enterprise Management Console.
  
  When it comes to virtualization, there is significant value in purchasing Enterprise Edition. Take for example a company that has TMG installed on a two-processor server that typically requires four virtual CPUs to handle its load. However, at peak times (say, 9am to 10am Monday–Friday), the load increases and the company reallocates another four virtual CPUs to a second instance of TMG to handle this increase.
  
  In this scenario, the cost for Enterprise Edition would be $12,000 USD (retail pricing), as Enterprise Edition is licensed by physical processor only and allows companies to have unlimited virtual CPUs and move the TMG licenses as needed.
  
  Using Standard Edition, they would have to license each physical and virtual server, which would cost $15,000; in addition, they would be able to transfer licenses from one machine to another only once every 90 days.
  
  
• How do companies activate the TMG 2010 and TMG Web Protection Service licenses?
  
  TMG 2010. It is pre-PIDed, and does not require customers to enter a product key separately. Customers can simply download the product from the MVLS site or install the media from their disk kit.
  
  TMG Web Protection Service. Customers will be asked to enter their seven-digit Microsoft licensing agreement number and the end date of the agreement. If the agreement number is longer, they will enter only the first seven digits.
  
  
• Is Forefront TMG part of the Forefront Protection Suite and ECAL?
  
  Forefront TMG Web Protection Service is part of Forefront Protection Suite and ECAL. Forefront TMG 2010 is not part of these suite offerings and must be licensed separately.
  
  
• For Forefront TMG Web Protection Service, how are users counted to be licensed?
  
  Customers need a User Service License (USL) for every user who accesses data processed by TMG or a Device Service License (DSL) for every device that accesses data processed by TMG. They do not need USLs or DSLs for external users or their devices.